Common Weakness Enumeration

CWE-270 Privilege Context Switching Error

Description

The product does not properly manage privileges while it is switching between different contexts that have different privileges or spheres of control.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-270 ordered by modification date.

9 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-ff6v-w58f-v97w	CVE-2025-49583	MODERATE	maven/org.xwiki.platform/xwiki-platform-notifications-notifiers-default	XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right	2025-06-13
GHSA-jchm-fm4q-c2fp	CVE-2023-25754	CRITICAL	pypi/apache-airflow	Apache Airflow vulnerable to Privilege Context Switching Error	2025-02-13
GHSA-7mr7-4f54-vcx5	CVE-2024-51987	MODERATE	nuget/Duende.AccessTokenManagement.OpenIdConnect	HTTP Client uses incorrect token after refresh	2024-11-08
GHSA-qxgx-hvg3-v92w	CVE-2024-47173	MODERATE	-	ai-admin-graphql has a Denial of service vulnerability in SaaS and marketplace setups	2024-10-24
GHSA-xjm6-jfmg-qc6p	CVE-2024-37294	MODERATE	-	Aimeos denial of service vulnerability in SaaS and marketplace setups	2024-06-11
GHSA-35j5-m29r-xfq5	CVE-2023-37912	HIGH	maven/org.xwiki.platform/xwiki-core-rendering-macro-footnotes maven/org.xwiki.rendering/xwiki-rendering-macro-footnotes	XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro	2023-11-01
GHSA-h6f5-8jj5-cxhr	CVE-2023-26475	CRITICAL	maven/org.xwiki.platform/xwiki-platform-annotation-ui	xwiki-platform vulnerable to Remote Code Execution in Annotations	2023-03-13
GHSA-g9fw-9x87-rmrj	CVE-2020-7020	LOW	maven/org.elasticsearch/elasticsearch	Privilege Context Switching Error in Elasticsearch	2022-06-06
GHSA-p9cf-qjxq-vxw6	CVE-2020-1719	MODERATE	maven/org.wildfly.bom/wildfly	Privilege Context Switching Error in wildlfy	2021-06-17